kh
pckduwrwyb
vyuxfjse
ycna
Behavioral task
behavioral1
Sample
ab1e6797efbeda515d3522275b4e118f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ab1e6797efbeda515d3522275b4e118f_JaffaCakes118
Size
82KB
MD5
ab1e6797efbeda515d3522275b4e118f
SHA1
bd0a2574188ecc366a903e11242427f5b68b88e2
SHA256
eecc0bc61d40d658b3278802eddea2fd8b631ec73c5f07e0e05da6afe5afc31c
SHA512
83b6554d28b0fe1b1dca1e6d0b9e7f8a685dcf5ebef1e53961b8793712fd5eadddf9ff434fac4bba7191a7a190eca8cddd606963e05819d714b590da45149039
SSDEEP
1536:jhOGDou3qAroKXshcl88Fnq9id0b0eVjTmuVDxPnouy89:jzDou3VMK8D8tmDIeVjNDdout9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ab1e6797efbeda515d3522275b4e118f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
kh
pckduwrwyb
vyuxfjse
ycna
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE